Multimedia arrangement

ABSTRACT

The invention relates to a multimedia arrangement comprising a remote control ( 1 ) having a keypad ( 4 ) with only six control buttons ( 5 - 10 ). All functions of the multimedia device ( 2 ) can be controlled via three menu levels, an object group being selectable in the first menu level, an object being selectable in the second menu level, and an action to be performed with the object being selectable in the third. Elements of the object groups, objects, and actions are displayed in fields on the display device in a vertical column ( 31 ) and a horizontal line ( 32 ), the column ( 31 ) and the line ( 32 ) intersecting in a focus field ( 33 ). The elements of the fields can be moved by the control buttons ( 5 - 8 ) in the fixed focus field, and can be activated there by a selection button ( 9 ). Selection and arrangement of the elements is done by a user database ( 20 ) in the multimedia device depending on data determined by an identification device of the remote control.

FIELD OF INVENTION

The invention concerns a multimedia arrangement with a remote control,multimedia equipment, and a display device for operating multimedia homeelectronics.

BACKGROUND

Such a multimedia arrangement is known from the patent WO 02/17627 A2.

There, a remote control for a set-top box is described, which can bepersonalized for the specific user, which is done using biometricfeatures of the user, such as, for example, a fingerprint reader, avoice recognition circuit, an iris scanner, a “sniffer”, or aface-recognition device. As an alternative to automated personalization,the specific user can also be required to provide a password, aspecified keying sequence, or the like. With it, a set-top box and otherhome entertainment equipment, such as a video recorder, CD player, DVDplayer, and so on, can be controlled with a single remote control in onefamily or household.

Personalization of a remote control in connection with a set-top box hasa number of advantages:

-   -   The set-top box can be programmed in the sense of child        security, so that only selected television channels are seen and        other channels are blocked;    -   the set-top box can be so programmed that, also in the sense of        child security, only specified television times are        decontrolled, while the equipment is blocked at other times;    -   the set-top box can be programmed so that for each user their        television preferences are put together, particularly        pre-programmed groups of TV channels, such as, for instance,        sport channels, entertainment channels, educational channels,        etc. For each user, the spaces reserved for individual buttons        on the remote control can be changed, whereby the number of        possible buttons can also be reduced;    -   with interactive systems, such as interactive TV, home shopping,        home banking, video-on-demand, or similar ones, the user can be        identified, in which additional securities can be built into the        set-top box here as well, for example overall limits for        ordering goods or films, types of films (for example, suitable        for those under 18), etc.

In the patent WO 02/17627 A2 describing a remote control, the user isidentified once using a fingerprint reader. The remote then remainspersonalized to this user as long as he is logged in by pressing aspecific button again or by a new operation of the fingerprint reader.If this is forgotten that another user with the full access permissionof the previous user can execute these functions.

As a remedy, it can be provided that the personalization and thus mostof the functions are automatically turned off when no button on theremote control has been operated for a predetermined period of time orif the set-top box or a TV is turned off. It can also be provided thateach push of a button or specific function is performed only when thefinger-print reader has at the same time also identified an authorizedperson. As a further possibility, it can also be provided that all or atleast several buttons on the remote are fitted with a fingerprintreader.

The patent WO 02/084991 A1 likewise describes a remote control which canbe personalized for an interactive television system. There, it isprimarily a matter of assigning buttons programmed for the specificuser, in order to reduce the number of buttons. Additional functionssuch as, for example, “Open garage door”, can be implemented. Forseveral users, a table can be stored, on which the assignment ofindividual buttons can be set up for predetermined user-specificfunctions. By pressing a specific button, a menu is called up, on whichall users are shown and a specific user can be selected. No securitymeasures are provided there to prevent someone from logging on under auser name that is not assigned to him.

The U.S. Pat. No. 5,861,881 describes an interactive computer system formultimedia operation in which a user profile can be stored. This can bedone both on a local computer or a host computer of a network. Thiscomputer system can also, for example, be connected to a remotetransmitter by cable. Using this compiled user profile, specified dataor video content can be selected.

The U.S. Pat. No. 5,715,020 describes a remote control which can controla large number of devices. Each remote has a clearly identified code. Acentral control unit for several remotes is thus able to identify theindividual remote and assign to it specific devices to be controlledremotely.

The patent WO 2004/055717 shows a multimedia system with aremote-control unit, which exhibits a finger-print reading unit, for theremote control of a set-top box, to which a television is connected. Theset-top box is connected over a network to a remotely located server.The set-top box establishes a connection to the remote server only whenan authorized user has been identified on the remote by the fingerprintreader.

US patent 2003/0001907 A1 describes a method and equipment forcontrolling an electronic device. To navigate through a hierarchy ofgroups of control commands, fields are represented in a column and in arow, in which the rows and the columns intersect in a focus field. Thefields of a column and the fields of a row can be moved separately. Thecolumn field and the row field found in the focus field are combined tobring about a predefined action. At the same time, a variable number onthe menu level is provided whereby, if need be, the elements placed inthe focus field call up the next menu level. The user thereby stillretains an overview, and additional information is displayed in fieldsadjacent to the focus field on the respective menu level.

Similar devices are also described in EP 1 185 922 B1, EP 1 291 754 A2,and EP 1 425 652 A1. Many hierarchies and menu levels are also providedthere, in case any of them are needed, which complicates operation andmakes it confusing.

US 2002/0043557 A1 describes a multimedia system with a remote controlwhich identifies a special memory card related to the equipment to becontrolled.

Multimedia systems with remote control and the highlightedrepresentation of selectable actions are also known from WO 03/021915A2, U.S. Pat. No. 6,690,391 B1, and WO 03/043318 A1.

The complexity of operation is, however, a problem in the knownmultimedia equipment with personalized remote control. Many remotecontrols have up to 40 or more buttons, with which specific functionsare selected. Different functions can even be assigned to individualbuttons for each user. This has the result that most users generally useonly a limited number of functions. Besides, personalization also iscomplicated to accomplish. With most equipment, a menu is called upusing a personal “menu” button, which displays several main functionsand, in part, on various highly-staggered submenus, the individualfunctions available. In practice, most users are overwhelmed by thiscomplexity and usually only the younger family members are generallyable to operate such equipment, which then again is counterproductive,because functions directly related to security, such as child security,home banking, or fee-required functions that can be called up, justcannot be blocked directly against young people.

SUMMARY OF THE INVENTION

It is a task of the invention, in order to improve the remote control ofthe type mentioned above, to make very simple operation possible,including personalization, by guaranteeing a large amount of accesssecurity.

This task is resolved by the feature presented in patent claim 1.Advantageous embodiments and developments of the invention may be drawnfrom the subclaims.

The multimedia arrangement according to the invention has a remotecontrol that can be personalized, which exhibits an identificationdevice, multimedia equipment controllable by the remote control whichis, for example, a so-called set-top box and display equipment attachedto this multimedia equipment which, for example, is an image screen, aso-called “beamer”, a monitor, or the like. The multimedia equipmentcontains a microprocessor and a programmable memory connected to it,which contains a “user database” in which a large number of data arestored, the individual users are identified, their specific “rights” areassigned, and an individual configuration set for the multimediaequipment, which is then depicted on the display equipment. The userdatabase can be both arranged in the multimedia equipment itself orentered remotely, for instance by a service provider, and be called upthere over a network.

The multimedia arrangement is so designed and configured that the remotecontrol needs only six control functions, namely four “directionfunctions” for “On”, “Off', “Left”, and “Right”, one selection function,and one “Back” function. The functions named can be called up using thebuttons of a keyboard on the remote control. Instead of buttons, otherinput devices can also be used, such as, for instance, a so-called touchscreen, which triggers the corresponding functions based on predefinedfinger motions or the like on the touch screen. In the same way, avoice-activated control is possible or control using sensors, whichrecords the motions of the user's hand or the like. All the functions ofthe multimedia equipment can be selected using three menu levels, whichare laid out abstractly and hierarchically as follows:

-   Menu level 1: selection of a subject group-   Menu level 2: selection of a subject-   Menu level 3: selection of an action with the subject selected.

This arrangement into three menu levels is kept consistent for all thefunctions. Always using this rigid arrangement with the three menulevels, the user can very quickly find his way around and can alsoalways go back very easily to the first basic menu level, by calling upthe “Back” function twice or by using a special function (“Home”function).

For further ease of operability, the elements of the individual menulevel are arranged according to a type of matrix with vertical columnsand horizontal rows, while all the remaining elements are not taken intoconsideration. With a matrix, each element is defined by its column androw coordinates, and as a result, it assigns both a row and a column. Ifonly one row and only one column are represented, then one field ispresented, which lies just at the intersection of column and row andwhich is designated in the following as a “focus field”, in which onefocus element is therefore found.

This focus field is located on all menu levels and is always in anunalterable, predefined location on the display equipment for allfunctions, and as a result it is fixed. The location so specified forthe focus field can be changed, depending on the previously identifieduser. For example, in the Culture area, where the focus field isdescribed and read from right to left, it is desirable to place thefield in a location other than the Culture area where it is read fromleft to right. In the latter Culture area, the location of the focusfield is preferred in the lower left corner of the display equipment.Using the four motion functions named, the elements of the columns are“moved” upward or downward so that, for instance, on the first menulevel, the actual subject group is visible in the “focus” element,whereby the element of the subject group is then visible on the firstmenu level in the horizontal row and can be moved by performing the“Left” or “Right” motion function in the “focus” element. By operatingthe selection function, the subject group found in the “focus” elementcan then be selected and the second menu level activated, which also hasthe analogous arrangement or representation for elements in columns androws. Here, upon moving the four motion functions, a subject in the“focus” element is moved, it is selected using the selection function,and the third and last menu level appears, which again has elementsarranged analogously in columns and rows, in which the “focus” elementthen designates the action to be taken with the subject selected, whichis activated by operating the selection function.

Substantial simplification and simple operation resulting therefrom isobtained by “personalization”, whereby the entire system is configuredfor an individual user, in which a user profile is laid out. Using anidentification device containing biometric data for one person, such as,for example, a finger-print reader, the individual person is firstidentified, whereupon a user profile established previously for theidentified person is called up, which is stored in a user database. Theuser database contains not just access authorization, but menu systemsassigned to the individual person as well, which, for instance, containa limited number of desired television stations, that the individualuser can select when setting up his user profile. As a result, forexample, the number and order of television stations generally displayedon the menu system are substantially reduced, because the unwanted TVstations are not displayed at all. With this reduction in the onlyelements generally displayed on the individual menu system, theconsistent use of the three menu systems mentioned above is clear, andthe overall system is freed of superfluous encumbrances.

Aside from the simple operation of the multimedia equipment by means ofa remote control, transmission security is increasingly important,because sensitive personal data are associated with accessauthorization, such as, for instance, name, address, birthdate, bankaccounts, credit-card numbers, etc. Programmable remote controls can beobtained on the market which can read in and store data transmitted froman authentic remote control, so that it is possible to identically copyan authentic remote control and consequently log in with the copiedremote control onto the multimedia equipment as an unauthorized user andto perform all the functions and as a result also to circumvent theidentification device available on the remote control, such as afingerprint reader, for instance, because the data ascertained from theidentification device is sent by wireless mode to the multimediaequipment and thus can be read in by an unknown remote control. Hence,to increase access security, a replaceable hardware-related deterrent isproposed, with which the remote control is identified with respect tothe multimedia equipment. Preferably, this hardware-related deterrent isa Subscriber Identity Module (SIM) card, such as is generally known withmobile telephones. Such SIM cards have proven themselves a million timesover, are inexpensive to obtain, and are considered to be an extremelysecure and reliable means of encryption. In addition, SIM cards alsohave the advantage that data can be stored on them, and as a result,pre-settings can also be transmitted to other equipment, for example ifa device is defective.

A problem resulting from demands for simpler operability and accesssecurity, then, is the hardware-related expense of the remote control,which needs a very high-performance, relatively very energy-intensive,and expensive microprocessor. To resolve this resulting problem, theinvention proposes that the identification device of the remote controltransmit the data read in to the multimedia equipment and evaluation ofthese data take place first in the multimedia equipment. If theidentification device is, for example, a fingerprint reader, it reads inthe image data of a fingerprint, and then these unevaluated image dataare transmitted to the multimedia equipment and are evaluated therefirst and compared with the data stored in the user database.

To increase security, these image data should certainly be encrypted,whereby preferably an asymmetric encryption method is carried out uponusing the SIM card. In a particularly preferred manner, the followingdata are stored on the SIM card:

-   -   a first pair of digital keys;    -   a second pair of digital keys;    -   a personal identification code; and    -   personal data for at least one user.        In the memory of the multimedia equipment, the following data        are stored after a first initialization:    -   only one key of the first pair of digital keys;    -   only one key of the second pair of digital keys;    -   biometric data for the identification device and personal data        for a user, as well as the personal identification code,        encrypted with the only one key of the second pair of digital        keys.

When setting up a connection between the remote control and themultimedia equipment, the SIM card reads in the biometric data for theuser, adds to these the personal identification code and the other keyof the second pair of digital keys, and sends a data packet soconstructed, with the other, encrypted key of the first pair of digitalkeys to the multi-media equipment. The multimedia equipment decrypts theencrypted data record received with the stored one key of the first pairof digital keys, extracts therefrom the other key of the second pair ofdigital keys, the personal identification code, and the biometric data.Thereupon, it reads out from its memory the encrypted biometric data,the encrypted personal data, and the encrypted personal identificationcode and decrypts them with the other key of the second pair of digitalkeys, compares the decrypted personal identification code received andthe decrypted personal identification code stored and only activates themultimedia equipment if they agree.

Preferably, the biometric data read in was compressed before making thedata record; preferably this was done according to Huffman coding.Furthermore, preferably the data record to be transmitted from theremote control to the multimedia equipment is block-encoded and ispreferably provided with forward error correction.

Preferably, the multimedia equipment also has a reader for a SIM card,in which according to a variant of the invention a connection set upbetween the remote control and the multimedia equipment is possible onlyif a related pair of SIM cards is available in both sets of equipment.According to an alternative, the remote control can first store allrelevant data on the SIM card found therein, whereupon the SIM card isthen taken from the remote control to the multimedia equipment, in orderto read in the relevant data there.

According to a further variant, the SIM card is only used for theconfiguration and can be removed for further operation of the remote,whereby a configuration is possible only with a SIM card available.

Furthermore, still to be mentioned is that the term “multimediaarrangement” is to be understood here in a broad sense and does not justinvolve entertainment and communications media but also the control ofequipment and machinery in general. So various equipment can beconnected to the multimedia arrangement, monitored, and/or controlled.Here, it can operate, for example, surveillance cameras, door-openingequipment, systems found in a house such as, for instance, heatingsystems, air-conditioning systems, lighting systems, alarm systems, andgarden-watering systems, or communications systems such as telephone,fax, and Internet access, or other equipment as well, such as a kitchenstove, refrigerator, or the like. In this sense, the multimediaequipment is universal equipment, which can also perform monitoring andcontrol functions.

BRIEF DESCRIPTION OF THE FIGURES

In the following, the invention is explained in more detail using anembodiment example in association with the drawing. Shown are:

FIG. 1 a basic circuit diagram of a multimedia arrangement according tothe invention;

FIG. 2 a representation of a menu level;

FIG. 3 a flow chart to explain the initialization of a connectionbetween the remote control and the multimedia equipment; and

FIG. 4 a flow chart to clarify an identification process between remotecontrol and multimedia equipment.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

FIG. 1 shows a remote control 1, which controls multimedia equipment 2,in which display equipment 3, such as an image screen, for instance, isconnected to the multimedia equipment 2. The remote control 1 has akeyboard 4, which exhibits only six control keys, namely four movementbuttons 5, 6, 7, and 8 for the directions “On”, “Off', “Left”, and“Right”, as well as a confirmation button 9, which triggers a selectionfunction, and a “Back” button 10. The keyboard 4 is connected in theusual manner to a microprocessor 11, to which at least one memory 12, aSIM-card reader 13, a identification device 14, and a send/receive unit15 are attached. Instead of a keyboard, as mentioned above, other inputdevices can be used. The term “keyboard” with movement buttons henceillustrates only one possible example.

The remote control 1 can establish a wireless communications link withthe multimedia equipment 2 using the send-receive unit 15, which isindicated by an arrow 16. Customarily, this is done by means of aninfrared signal. The multimedia equipment 2 has a correspondingsend/receive unit 17, which is connected to a microprocessor 18. Becauseof that, it is indicated that, between the remote control 1 and themultimedia equipment 2, both a bidirectional communications link ispossible, as well as a monodirectional communications link, in whichdata are transmitted only from the remote control 1 to the multimediaequipment 2, but not in the opposite direction. The microprocessor 18here has a substantially higher performance than the microprocessor 11of the remote control 1. Moreover, connected to the microprocessor 18 isa memory 19, whereby this memory 19 either has itself an area designatedas a “user database” 20 or an additional memory 20 is attached whichcontains the user database. The user database 20 can also be disposedexternally to the multimedia equipment and, for example, can be set upby a remotely located service provider, whereby the multimedia equipment2 can access the user database over a network. Furthermore, a SIM-cardreader 21 is connected to the microprocessor, as well as one or severalinput/output interfaces 22, as well as further optional, peripheralequipment 23 such as a hard drive, for instance, as well as a video card24 for processing video signals for the display equipment 3, which is,for example, a TV cathode-ray tube, an image screen, a beamer, or otherequipment for depicting moving pictures, for instance.

To the interface 22 of the multimedia equipment 2, which can be aso-called set-top box, for instance, various devices can be connected,for example a telephone line, a DSL (broadband) connection, a radiolink, a television receiver, a television antenna, and furtherperipheral equipment, such as, for instance, a video recorder, a DVDplayer, a CD player, a personal computer, a video camera, or otherequipment found in a household, which can be controlled by themultimedia equipment 2.

For the desired personalization between a remote control 1 andmultimedia equipment 2, the SIM-card reader 13 and the identificationdevice 14 are provided on the remote control 1. Using the SIM-cardreader 13, the remote control 1 is clearly identified and unauthorizedremote controls are differentiated from others. A particular person isidentified using the identification device 14. A preferredidentification device 14 is a fingerprint reader integrated into theremote control 1, which reads in the image data of a user's fingerprint,as will be explained further below, and which is compared with datastored in the user database 20 in order to identify an authorized user.

If the remote control 1 has been identified using the SIM-card readerand the user identified with the identification device 14 with respectto the multi-media equipment 2, then the microprocessor 18 calls up fromthe user database 20 a user profile stored there for the respectiveuser, using which the multimedia equipment 2 is personalized for theuser logged in, in which are established, for example, accessauthorization, broadcast times, selected television stations, etc.,which then appear on the display equipment 3. In collaboration betweenthe microprocessor 18, the user database 20, and a program memory 19,all the possible functions are made accessible on only three menus,whereby the three menu levels are set up hierarchically as follows:

1. Selection of a subject group,

2. Selection of a subject,

3. Selection of an activity with the subject selected, in which all thefunctions can be controlled using only six control buttons on thekeyboard 4.

In the following, this is clarified in detail using FIG. 1 as an exampleof a TV program. If the user has been identified, then he can beindicated on the display equipment 3 in a separate field 30 on menulevel 1. A cross-shaped image of the fields appears on the displayequipment 3, to be precise, the fields 31 arranged vertically in acolumn and fields arranged horizontally in a row 32, in which, at theintersection of the column fields 31 and the row fields 32, a so-calledfocus field 33 is formed which can be selected using the confirmationbutton 9 on the remote control 1. The basic functions in the columnfield 31 are selectable, such as, for instance, Basic set, TV, Viewvideos, View photos, Play audio files, etc., in which the selection andthe arrangement of the fields is already personalized for the userindicated in the field 30. All the elements of the columns 31 can bemoved upward or downward using both buttons 5 and 6, so that only oneelement is always visible in the focus field 33.

In the embodiment example represented, the function “TV” is selected. Asa result, the television station available to the user who is logged inthen appears in the row fields 32. By operating buttons 7 and 8, for“Left” or “Right”, the desired station can then be moved into the focusfield 33 and selected by operating the selection button 9.

Then the second menu level appears, on which the programs are displayedfor the TV station selected, which are visualized using the electronicprogram guide (EPG) that is broadcast nowadays by most stations, inwhich a chronological grouping is set in the column fields 31 of columnsaccording to day of the week and/or time of day, such as morning,afternoon, or evening and the individual program is displayed in the rowfields 32, including the broadcast time, if needed. The program found inthe focus field 33 can then be selected with the confirmation button 9,whereupon the third menu level appears.

On the third menu level, the possible actions are displayed, such as,for instance, to View now, Record, or Program. Many different fieldsappear for each number of functions available.

By pressing the “Back” button 10, a current menu level reverts to theprevious one.

Correspondingly, an appropriate selection appears for all the otherfunctions. With the function “Photos at menu level 1”, for example, aspecific “Album” is selected, such as, for instance, Vacation,Christmas, etc. At the second level, individual photos can then beselected and at menu level 3 the appropriate action, such as View,Print, Delete, Send as e-mail, or the like.

For each authorized user, certain functions are not displayed at all.Thus, for example, the function “Home banking” is blocked for certainusers and is not displayed at all for them.

On the second menu level, for instance, broadcast times or specifiedtypes of stations can be blocked and as a result are automaticallysuppressed, and on the third menu level, again, other functions can bereleased or blocked, such as, for instance, Delete recorded programs,Delete photos, or the like.

Using the personalization, the selection and arrangement of theindividual elements are also coordinated for the user. So, for example,on the first menu level at the menu item “TV”, the selection andarrangement of possible stations is laid out individually for a specificuser, in which the station watched most often by the respective user isdisplayed in the focus field 33, where this also depends on the day ofthe week and/or the time of day. This can also be adjusted“dynamically”, without the user having to actively enter the appropriatedata into the user database 20. If, for example, an authorized userwatches a specific station more often on one particular day of the week,this “preference” is stored in the user database 20, and on theappropriate day and hour the appropriate station and the action areplaced in the focus field 33.

Using the combination of only six control buttons on the keyboard andthe three menu levels, which are kept consistent for all possibilitieson the equipment, the operation of the multimedia arrangement issubstantially simplified and the hardware-related expense of the remotecontrol is reduced by the small number of buttons. The user no longerhas to remember a large number of button functions and different buttonpositions. Using the personalization, functions not desired by him ornot released to him can be suppressed at the outset, and he can easilyfind his way around the three menu levels. It is also emphasized thatthe arrangement of the fields 32 into rows and into columns 31, with afocus field 33 through which the individual fields are moved,substantially facilitates operation because the “essentials” alwaysappear in the same place, so that the user no longer has to search onthe display equipment for where the desired function is displayed inorder to subsequently maneuver there with the movement buttons.

In the following, an example of the menu structure with the three levelsis explained, in which fragments of the XML data used are depicted.So-called meta-definitions for the prior selection of menu elements, aswell as portions of the definition for image-screen representations, areomitted for purposes of a clear overview.

On the main menu, a subject group is selected.

-   [menu] . . . describes an entire menu,-   [item] . . . describes a menu element.-   [action] . . . described the action that will be carried out if the    XML node is selected,-   app . . . designates the application or the program that will be    loaded with the associated subject,-   className . . . designates the class to be established,-   menu . . . designates a new XML data file that will be loaded for    the next menu level.

<?xml version=“1.0” encoding=“UTF-8”?> <menu> <!-- ... --> <itemid=“overview” title=“TV Program” labelbgcolor=“#014a8d”> <iconurl=“icons/mainmenu/main menu icon overview.png” /> <itemid=“show_channels” title=“show all Channels”> <action className=“AppEPG”app=“apps/AppEPG” menu=“xml/AppEPG.xml”/> </item> </item> <!-- ... --></menu>

If “show_channels” is selected, the application “apps/AppEPG” is loadedand a new instance of AppEPG is generated. The menu for the main level(subject group) is greyed out, and a new menu is produced under“xml/AppEPG.xml”. After the menu is generated, “AppEPG” is associatedwith the menu and displayed.

The selection from the first menu level is restricted at the second menulevel in order to select a subject.

This XML command shows several metadata ([info]) which are used topopulate the content field.

<?xml version=1.0″ encoding=“UTF-8”?> <menu id=“root_epg”> <!-- ... --><item id=“bbc_world” title=“BBC World”> <item id=“bbcn” text=“BBC News”><info url=“icons/tv/bbcn.png”> <time> <start hour=“08” min=“00” /> <endhour=“08” min=“30” /> </time> <shorttext> <span class=“headline”>BBCNews</span>· <p class=“subheadline”>(News Magazine, UK 2007)</p> <pclass=“description”>Hourly news from around the world.</p> </shorttext></info> <action className=“ActionTimeline” app=“apps/ActionTimeline”menu=“xml/ActionTimeline.xml” /> </item> <!-- ... --> </item> <!-- ...--> </menu>

At the third menu level, the subject has already been selected, so thatthe action to be carried out with the subject is still to be selected.

In this XML data file, the internal function “ActionTimeline” is calledup, which is addressed by using its name. The three possible actions of“View”, “Record this program”, and “Record this series” are offered andactivated using the selection button or selection function.

<?xml version=“1.0” encoding=“UTF-8”?> <menu id=“action_timeline”cache=“false”> <item id=“actions” title=“Actions”labelbgcolor=“#461588”> <item id=“action_view” title=“View”/> <itemid=“action_record” title=“Record this Program”/> <itemid=“action_record_series” title=“Record this Series”/> </item> </menu>

FIG. 2 shows the structure of a matrix with fields A1 through K23. Animage-screen area B designates a visible area in which the entire matrixcan be adjusted so that just one detail can always be depicted in theimage-screen area B. In the image-screen area, only one column, herewith fields B13 through B23, and one row with fields A22 through G22 aremade visible, while all the other hatched fields represented aresuppressed. In the junction region between the visible column andvisible row is the field B22, which defines the focus field. This focusfield contains, as shown above, all the necessary commands on thecorresponding menu level. The whole matrix is moved using the movementfunctions. If, for example, the field E17 is moved to the focus field,then the function “Left” has to be called up three times and thefunction “Down” five times. The field B22 contains, at each menu level,either the commands to call up the next lower menu level or, at the lastmenu level, the step described above to execute the respective action.It is important that each field contain all the necessary information.Also, no associations have to be made between partial functions of acolumn and partial functions of a row. All fields on a menu level, asrepresented in FIG. 2, consequently lie at the same hierarchical level(menu level) and are addressable by means of the movement functions,that is, they can be moved in the focus area.

In the suppressed area represented by the hatching in FIG. 2, furtherinformation can be inserted, such as, for instance, a title and shortdescription of a TV program, a preview of photos, or the like.

With reference to FIG. 3, the initialization will now be described.First, the SIM cards are inserted into the SIM-card reader 13 of FIG. 1at a step 40. The SIM cards contain the following stored data:

-   1. a personal identification number (the so-called PIN),-   2. personal data for a user, such as, for instance, name, birthdate,    sex, credit-card number, etc.,-   3. a first private key (PrivK 1), whereby the data indicated in 2    and 3 above are accessible only after entering the PIN indicated in    1 above.

The SIM card further contains the following accessible data:

-   4. a second private key (PrivK 2),-   5. a personal identification code (PIC),-   6. a first public key (PubK 1), and-   7. a second public key (PubK 2).

As is further clarified in still more detail below, the PubK 1 and PrivK1 keys form a first, and the PubK2 and PrivK 2 form a second, pair ofkeys, which are used for encryption and decryption. So-called asymmetriccryptography is used for this, in which one key of one of the pairsmentioned, usually the so-called public key, is used for encryption ofdata, and the other key of the pair, usually the so-called private key,is used for decryption. Thus different keys are used for encryption anddecryption. Decryption of data with the key used for encryption is notpossible. The algorithms for encryption and decryption are known, inprinciple. Reference is made, for example, to the asymmetric RSAencryption algorithm, the Rabin cryptosystem, or the El-Gamalcryptosystem. After inserting the SIM cards, the PIN is then retrieved(step 41), which is entered by means of the keyboard 4 (FIG. 1) with thedirection buttons in combination with the fields 31 and/or 32 of thedisplay equipment 2 and is customarily a four-digit number. As a result,the SIM card is released, and the personal data mentioned above and thefirst private key PrivK 1 blocked by the PIN are accessible.

The remote control 1 then sends the first private key, PrivK 1 (step 42)and the second public key PubK 2 (step 44) using the send/receive device15 to the multimedia equipment 2, where they are received by thesend/receive device 17 and are stored in memory 19 by the microprocessor18 (steps 42-45). Thereupon, the biometric data of the user are read inusing the fingerprint reader 14 (FIG. 1) (step 47) and transmitted tothe multimedia equipment 2 (step 48), where they are encrypted (step 49)with the previously received and stored public key PubK 2. Similarly,the personal identification code (PIC) is retrieved from the SIM cardand transmitted to the multimedia equipment 2 (step 50), where it isalso encrypted with the public key PubK 2 (step 51). Consequently, thepersonal data of the user are either retrieved from the SIM card orentered using the keyboard 4 and transmitted to the multimedia equipment2 (step 52), where they are also encrypted with the second public keyPubK 2 in step 53.

The second public key PubK 2, which is stored in the multimediaequipment 2 in step 45, is erased, after these processes, in step 54. Auser profile, made up of the stored and partially encrypted data, isthen set up and stored in the user database 20, containing the followingdata:

-   -   the unencrypted first private key PrivK 1, the biometric data of        the user encrypted with the PubK 2 key;    -   the encrypted personal identification code (PIC) and the        encrypted personal data, currently encrypted with PubK 2.

Additionally, the user can add still further data to the personal data,such as, for instance, a channel listing of preferred TV channels,button positions for buttons on the remote control, blocked TV channels,TV times, and so on.

The initialization process described is classified as critical as longas the first private key PrivK 1 is transmitted by wireless mode and asa result can be “bugged”, if a suitable receiver is within range. Withinfrared transmission, the danger of a suitable receiver being in range,though, is very small, because the range is severely limited and anuninterrupted line-of-sight connection is required.

High security is, however, provided afterward because the remaining dataare encrypted with the public key PubK 2, which is erased in themultimedia equipment 2 after initialization, and these data cannot bedecrypted with the first private key PrivK 1.

To further increase security, the private key PrivK 1 can also be erasedon the SIM card, so that it can be called a “more private” key, which isstill only available to the equipment.

In connection with FIG. 4, the normal identification process will now bedescribed, whereby a link is established between the remote control 1and the initialized multimedia equipment 2. It is consequently assumedthat the remote control 1 is send-ready and the multimedia equipment 2is receive-ready.

The biometric data of the user are read in a step 55, for example, asthe user lays a finger on the finger-print reader 14, which reads in thecorresponding image data. These image data can be compressed in a step56, which is done according to known data-compression methods, such as,for instance, Huffman coding.

These compressed image data are added in a step 57 to the personalidentification code PIC, which is read out either from the SIM card orfrom the memory 12 (FIG. 11). Furthermore, the second private key PrivK2 is added in step 58, which is also read out either from the SIM cardor from the memory 12. This entire data packet consists of thecompressed biometric data, the PIC, and the key PrivK 2. This datapacket is encrypted with the first public key PubK 1 in a step 59. Inaddition, block encoding and so-called “forward error correction (FEC)can be optionally performed (step 60).

Thereupon, the data so produced are transmitted to the multimediaequipment 2 over the radio link 16 (step 61) and received by themultimedia equipment 2 (step 62). There, these data are first decrypted(step 63) with the private key PrivK 1 stored in the user database 20,whereupon a data record is obtained (block 64) with the PrivK 2, PIC,and biometric data, from which the second private key PrivK 2 isextracted in step 65. The biometric data and the PIC are temporarilystored in a cache memory 19. With the now decrypted and extracted secondprivate key PrivK 2, the data stored in the user database in step 66 andencrypted with the public key PubK 2 before storage, namely the PIC, thebiometric data, and the personal data, are decrypted, and in theresulting step 67, the now decrypted data from the user database and thedata received are compared. Appropriately, the PIC's are compared first.If these do not agree, the data received from an authorized remotecontrol are not authorized, so that further operational steps can becalled off. If necessary, a request is created for repeat transmissions,which, for example, is displayed on an image screen of the TV equipmentor transmitted as a return signal to the remote control 1 over the radiolink 16 and is displayed there.

If a comparison of the PIC yields an authorized remote control, then thebiometric data are compared (step 67.1) and if they agree, themicroprocessor 18 emits a release signal in its output to the interface22 (step 69). Then secure, authorized operation of the multimediaequipment 2 and of the further equipment attached to it can be carriedout using the remote control 1. A receipt signal for a successful log-onis also transmitted over the radio link 16 of the remote control 1,which erases sensitive data in the memory 12 in the remote control 1, inparticular the biometric data recorded. Similarly, the data to becompared are also erased in the memory 19 of the equipment 2, so thatthe memories 12 and 19 of the remote control 1 and of the equipment 2are again in their initial state after successful log-on. Then normaloperation is established between remote control 1 and multimediaequipment 2, which can also be bidirectional.

For reasons of security, it can also be provided that the authorizedconnection be cut off after a predetermined length of time and a newlog-on be performed, according to the steps described in connection withFIG. 3. It can also be provided that for specific, security-relevantcontrol processes, a new identification be made, for example, bytransmitting name, address, or credit-card number over thecommunications equipment connected.

With the initialization according to the operational steps describedabove in connection with FIG. 3, user rights can also be granted withthe personal data of the particular user, for example, related tosetting up or changing user profiles, so that, for instance, onlyspecified persons who are identified by their biometric data areauthorized to set up new users in the user database or to change therights assigned to particular individual users. Other data which arealso stored in the personal data, can, on the other hand, be so arrangedthat the individual user can freely change them, after hisidentification, such as, for example, the button position on the remotecontrol or favorite lists of individual TV stations, insofar as theseare decontrolled.

In summary, a very high level of security is attained with theinvention. If the equipment itself gets into the hands of unauthorizedpersons without a SIM card, it is not possible to get hold of theprotected biometric data and the protected personal data. Only if anunauthorized person has the equipment and the SIM card at his disposalis it then theoretically possible to decrypt the protected data storedin the user database 20 with the first key PubK 1 stored on the SIMcard. For this, the user must then have immediate access to the userdatabase 20, which requires a highly technical effort. Here themanufacturer can provide that the corresponding memory be protected suchthat either no access is possible from outside or its content isautomatically erased if an attempt is made to remove it from the memory.In any case, it is recommended to purge the memory containing the userdatabase before handing the equipment over to third parties.

1-9. (canceled)
 10. A multimedia arrangement comprising: a remotecontrol comprising an input device, a first microprocessor, at least onefirst memory, an identification device which contains biometric data fora person, and a first communications unit for data transmission;multimedia equipment comprising a second microprocessor, a secondcommunications unit for receiving data from the first communicationsunit, at least one interface, and at least one user database for storinga user profile; and display equipment, which is connected to themultimedia equipment; wherein the input device of the remote control isdesigned to call up control functions, whose functions of: “ON”, “OFF”,“LEFT”, “RIGHT”, “SELECT”, and “BACK” are assigned; wherein all thefunctions of the multimedia equipment can be controlled on three menulevels, whereby a subject group at the first menu level, a subject atthe second menu level, and an action to be performed with the subject atthe third menu level can be controlled, such that elements of thesubject groups, elements of the subjects, and elements of the actionsare arranged on each menu level in fields of a matrix, such that onlythe elements of a single vertical column and elements of a singlehorizontal row from the matrix fields are depicted on the displayequipment; wherein the second microprocessor delivers, upon receivingcontrol signals from the remote control, depending on actuation of theinput device, such signals to the display equipment, that a singleelement of the matrix is placed in a focus field that is arranged in thecircular area of the column formed and of the row formed; wherein thefocus field is set up permanently, depending on the user profile;wherein an element found in the focus field can be activated by theselection function of the input device; and wherein the elementsdisplayed in the column field and the row field are configured,depending on the signals from the identification device, together withthe user profile stored in the user database.
 11. The multimediaarrangement according to claim 10, wherein the remote control comprisesa SIM-card reader into which a SIM card can be inserted and wherein theremote control and the multimedia equipment only activate acommunications connection between the first and the secondcommunications unit if a prespecified SIM card is inserted into theSIM-card reader of the remote control.
 12. The multimedia arrangementaccording to claim 11, wherein the microprocessor of the multimediaequipment is configured such that signals from the input device are onlyprocessed if the identification device of the remote control hastransmitted to the multimedia equipment predetermined signals whichcorrespond to signals in the user database.
 13. The multimediaarrangement according to claim 11, wherein the multimedia equipmentcomprises a SIM-card reader and the microprocessor of the multimediaequipment is so configured that activation of the communicationsconnection only results when a SIM card is inserted into the SIM-cardreader of the multimedia equipment.
 14. The multimedia arrangementaccording to claim 11: wherein the following data are stored on the SIMcard of the SIM-card reader of the remote control: a first pair ofdigital keys, a second pair of digital keys, a personal identificationcode (PIC), and personal data for at least one user; wherein the memoryof the multimedia equipment holds the following data, based on a firstinitialization: only one key of the first pair of digital keys, only onekey of the second pair of digital keys, with only one key of which inthe second pair of digital keys are encrypted biometric data andpersonal data, as well as the personal identification code; wherein,upon setting up a connection between the remote control and themultimedia equipment, the identification device feeds in biometric datafor the user and adds these to the personal identification code (PIC)and to the other key of the second pair of digital keys, reads out fromthe memory unit the encrypted biometric data, the encrypted personaldata, and the encrypted personal identification code (PIC) and decryptsthem using the other key of the second pair of digital keys, comparesthe decrypted personal identification code received with the decryptedpersonal identification code stored and if they agree, compares thedecrypted biometric data received with the decrypted biometric datastored and only activates the multimedia equipment if they agree. 15.The multimedia arrangement according to claim 14, wherein biometric datadetermined are compressed by the identification device of the remotecontrol before transmission to the multimedia equipment.
 16. Themultimedia arrangement according to claim 15, wherein the compression isperformed in accordance with Huffman coding.
 17. The multimediaarrangement according to claim 14, wherein the data record to betransmitted is block-encoded from the remote control to the multimediaequipment.
 18. The multimedia arrangement according to claim 14, whereinthe data record to be transmitted is provided by the remote control tothe multimedia equipment with forward error correction.
 19. Themultimedia arrangement according to claim 11, wherein the multimediaequipment comprises a SIM-card reader, and the microprocessor of themultimedia equipment is so configured that activation of thecommunications connection only results when a SIM card is inserted intothe SIM-card reader of the multimedia equipment.
 20. The multimediaarrangement according to claim 12: wherein the following data are storedon the SIM card of the SIM-card reader of the remote control: a firstpair of digital keys, a second pair of digital keys, a personalidentification code (PIC), and personal data for at least one user;wherein the memory of the multimedia equipment holds the following data,based on a first initialization: only one key of the first pair ofdigital keys, only one key of the second pair of digital keys, with onlyone key of which in the second pair of digital keys are encryptedbiometric data and personal data, as well as the personal identificationcode; wherein, upon setting up a connection between the remote controland the multimedia equipment, the identification device feeds inbiometric data for the user and adds these to the personalidentification code (PIC) and to the other key of the second pair ofdigital keys, reads out from the memory unit the encrypted biometricdata, the encrypted personal data, and the encrypted personalidentification code (PIC) and decrypts them using the other key of thesecond pair of digital keys, compares the decrypted personalidentification code received with the decrypted personal identificationcode stored and if they agree, compares the decrypted biometric datareceived with the decrypted biometric data stored and only activates themultimedia equipment if they agree.
 21. The multimedia arrangementaccording to claim 13: wherein the following data are stored on the SIMcard of the SIM-card reader of the remote control: a first pair ofdigital keys, a second pair of digital keys, a personal identificationcode (PIC), and personal data for at least one user; wherein the memoryof the multimedia equipment holds the following data, based on a firstinitialization: only one key of the first pair of digital keys, only onekey of the second pair of digital keys, with only one key of which inthe second pair of digital keys are encrypted biometric data andpersonal data, as well as the personal identification code; wherein,upon setting up a connection between the remote control and themultimedia equipment, the identification device feeds in biometric datafor the user and adds these to the personal identification code (PIC)and to the other key of the second pair of digital keys, reads out fromthe memory unit the encrypted biometric data, the encrypted personaldata, and the encrypted personal identification code (PIC) and decryptsthem using the other key of the second pair of digital keys, comparesthe decrypted personal identification code received with the decryptedpersonal identification code stored and if they agree, compares thedecrypted biometric data received with the decrypted biometric datastored and only activates the multimedia equipment if they agree. 22.The multimedia arrangement according to claim 15, wherein the datarecord to be transmitted is block-encoded from the remote control to themultimedia equipment.
 23. The multimedia arrangement according to claim16, wherein the data record to be transmitted is block-encoded from theremote control to the multimedia equipment.
 24. The multimediaarrangement according to claim 15, wherein the data record to betransmitted is provided by the remote control to the multimediaequipment with forward error correction.
 25. The multimedia arrangementaccording to claim 16, wherein the data record to be transmitted isprovided by the remote control to the multimedia equipment with forwarderror correction.